Senior IAM Engineer – Identity Governance & Administration

The Role Moderna is seeking a Senior IAM Engineer with expertise in Identity Governance & Administration (IGA) to help design, build, and scale our identity governance capabilities across the enterprise.

This role combines technical leadership with hands-on engineering, focused on access governance, identity lifecycle management, and provisioning across a complex, highly regulated environment. You will play a key role in establishing scalable and secure identity governance processes and integrating them across Moderna’s technology landscape.

You’ll partner closely with IAM, Cybersecurity, Compliance, and application teams to deliver identity solutions that are secure, scalable, and aligned with business needs.

Here’s What You’ll Do
• Serve as a senior technical leader and hands-on engineer for Identity Governance & Administration (IGA), contributing to both platform strategy and engineering execution
• Lead and actively contribute to the design, implementation, and continuous improvement of identity governance capabilities, including:

Access request and approval workflows

Identity lifecycle management (Joiner/Mover/Leaver processes)
Access certifications and recertifications

Role-based access control (RBAC) and access policies
• Design and implement scalable provisioning and deprovisioning solutions across enterprise systems and applications
• Partner with business stakeholders and application owners to gather requirements and translate them into technical designs and governance models
• Integrate IAM/IGA solutions with enterprise systems, including Active Directory, Entra , Okta, and SaaS applications
• Develop and maintain workflows, automation, and integrations using APIs, scripting, and modern identity standards (e.g., SCIM, REST APIs)
• Troubleshoot complex access, provisioning, and identity governance issues across systems and platforms
• Evaluate the current identity governance landscape, identify gaps, and drive improvements in security, scalability, and user experience
• Establish and support governance processes aligned with regulatory and audit requirements (e.g., GxP, SOX), including access reviews and policy enforcement
• Develop documentation, standards, and runbooks to support consistency, scalability, and audit readiness
• Collaborate with cybersecurity, infrastructure, and compliance teams to align identity governance controls with enterprise security strategy
• Stay current with industry trends, emerging technologies, and best practices in IAM and identity governance

Here’s What You’ll Need (Minimum Qualifications)
Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)8+ years of experience in IT, cybersecurity, or identity engineering5+ years of experience in Identity and Access Management (IAM), with strong exposure to Identity Governance & Administration (IGA)
Hands-on experience implementing or supporting IGA capabilities such as lifecycle management, provisioning, and access certifications

Experience integrating IAM solutions with enterprise systems and applications (e.g., Active Directory, Entra , Okta, SaaS platforms)

Experience with identity lifecycle processes, including provisioning, deprovisioning, and role-based access control

Experience working with APIs, automation, and scripting (e.g., Power Shell, JSON, REST APIs)
Strong understanding of identity security principles, including least privilege, Zero Trust, and access governance

Experience working in complex, fast-paced environments with the ability to manage multiple priorities

Here’s

What You’ll Bring to the Table (Preferred Qualifications)
Experience implementing one or more IGA platforms (e.g., SailPoint, Saviynt, Omada, One Identity)
Experience supporting or leading IGA platform selection efforts, including participation in RFP/RFI processes, vendor evaluations, and proof-of-concept (POC) activities

Experience designing and implementing access certification programs, governance models, and role frameworks (RBAC/ABAC)

Experience with Service Now or similar platforms for access request workflows and automation

Familiarity with identity architecture in hybrid environments (on-prem and…